nixos/libvirtd: add option to run qemu as non-root

New option virtualisation.libvirtd.qemuRunAsRoot (default: true). If false, qemu is run as non-privileged user qemu-libvirtd, reducing security risk
2018-08-10 13:59:58 +02:00
parent 9c338630a9
commit 980505dc3b
2 changed files with 26 additions and 0 deletions
@@ -325,6 +325,7 @@
      hydron = 298;
      cfssl = 299;
      cassandra = 300;
+      qemu-libvirtd = 301;

      # When adding a uid, make sure it doesn't match an existing gid. And don't use uids above 399!

@@ -610,6 +611,7 @@
      hydron = 298;
      cfssl = 299;
      cassandra = 300;
+      qemu-libvirtd = 301;

      # When adding a gid, make sure it doesn't match an existing
      # uid. Users and groups with the same name should have equal